Guide Using a game's API to give myself all items

Ted2 · December 28, 2019

1 hour ago, Aarivex said:

Most of the apps use their own APIs on their servers, which means the app communicates with their server to exchange data and state.

The app he used as an example contacted the server as soon as he bought a bike and basicly told the server that he bought a bike along with some data like the bike type and amount.

What he explains is that you can watch this data flow between the app (client) and server and send a own request to the server and change the data a bit in order to gain all the bikes in-game.

TL;DR Analyzing what the app does when he buys a bike (sending data to the server), changing that up a bit and sending custom data to the server -> free items!

https://blogs.mulesoft.com/biz/tech-ramblings-biz/what-are-apis-how-do-apis-work

Do you mean FLEXing? Thats what I used to achieve that.

Idk, I use FlexAll & apparently it worked for him too.

IamGhst · December 28, 2019

This seems like it’s gonna help the hackers even more. If I had a brain and time I would try this on a game that was very easy to hack back in the day but very hard to now.. Great find op.

Ted2 · December 29, 2019

7 hours ago, IamGhst said:

This seems like it’s gonna help the hackers even more. If I had a brain and time I would try this on a game that was very easy to hack back in the day but very hard to now.. Great find op.

and which game might that be?

IamGhst · December 29, 2019

3 hours ago, Ted2 said:

and which game might that be?

The game is Called WWE SuperCard. You used to be able to use Igameguardian to hack it yourself but not it’s become pretty much impossible to hack the most important thing, which were called bouts. Pretty much like an energy system, you would use IGG and you would freeze the amount and it would stick.. Now if u change the value and freeze it, it kicks you out the game to the login screen which is sad.. I would literally pay for a hack for that game lol

Ted2 · December 29, 2019

19 minutes ago, IamGhst said:

The game is Called WWE SuperCard. You used to be able to use Igameguardian to hack it yourself but not it’s become pretty much impossible to hack the most important thing, which were called bouts. Pretty much like an energy system, you would use IGG and you would freeze the amount and it would stick.. Now if u change the value and freeze it, it kicks you out the game to the login screen which is sad.. I would literally pay for a hack for that game lol

I’ll check somewhere next week

Walking Hell · December 29, 2019

When i do this i normally just copy the the request from flexible and edit it in notepad app to my desirable outcome , and open my terminal and paste it in there. However, you do require tweaks such as CA Certs and cUrl.

Updated December 29, 2019 by Walking Hell

bR34Kr · December 29, 2019

33 minutes ago, Walking Hell said:

When i do this i normally just copy the the request from flexible and edit it in notepad app to my desirable outcome , and open my terminal and paste it in there. However, you do require tweaks such as CA Certs and cUrl.

If you want to use cURL to make the requests then yes, but Python’s requests module should be fine too.

Walking Hell · December 29, 2019

11 minutes ago, bR34Kr said:

If you want to use cURL to make the requests then yes, but Python’s requests module should be fine too.

I never suggested it otherwise.

Ted2 · December 30, 2019

22 hours ago, Walking Hell said:

When i do this i normally just copy the the request from flexible and edit it in notepad app to my desirable outcome , and open my terminal and paste it in there. However, you do require tweaks such as CA Certs and cUrl.

That’s indeed a option too, I just find curl not really readable, so I like doing it in Python